bpftool/Documentation/bpftool-cgroup.rst

2 bpftool-cgroup
4 -------------------------------------------------------------------------------
6 -------------------------------------------------------------------------------
15 	*OPTIONS* := { { **-j** | **--json** } [{ **-p** | **--pretty** }] | { **-f** | **--bpffs** } }
34 |	*ATTACH_FLAGS* := { **multi** | **override** }
65 		  *ATTACH_FLAGS* can be one of: **override** if a sub-cgroup installs
66 		  some bpf program, the program in this cgroup yields to sub-cgroup
67 		  program; **multi** if a sub-cgroup installs some bpf program,
76 		  **multi**. They are executed in FIFO order (those that were
79 		  Non-default *ATTACH_FLAGS* are supported by kernel version 4.14
83 		  **ingress** ingress path of the inet socket (since 4.10);
84 		  **egress** egress path of the inet socket (since 4.10);
85 		  **sock_create** opening of an inet socket (since 4.10);
86 		  **sock_ops** various socket operations (since 4.12);
88 		  **bind4** call to bind(2) for an inet4 socket (since 4.17);
89 		  **bind6** call to bind(2) for an inet6 socket (since 4.17);
90 		  **post_bind4** return from bind(2) for an inet4 socket (since 4.17);
91 		  **post_bind6** return from bind(2) for an inet6 socket (since 4.17);
92 		  **connect4** call to connect(2) for an inet4 socket (since 4.17);
93 		  **connect6** call to connect(2) for an inet6 socket (since 4.17);
95 		  unconnected udp4 socket (since 4.18);
97 		  unconnected udp6 socket (since 4.18);
99                   an unconnected udp4 socket (since 5.2);
101                   an unconnected udp6 socket (since 5.2);
105 		  **getpeername4** call to getpeername(2) for an inet4 socket (since 5.8);
106 		  **getpeername6** call to getpeername(2) for an inet6 socket (since 5.8);
107 		  **getsockname4** call to getsockname(2) for an inet4 socket (since 5.8);
108 		  **getsockname6** call to getsockname(2) for an inet6 socket (since 5.8).
121 	-f, --bpffs
127 | **# mount -t bpf none /sys/fs/bpf/**